For sensitive reports, email fluritheme@gmail.com with a reproduction and affected version. Avoid publishing private credentials or personal data in a public issue.

The runtime is decorative client code. It does not accept remote commands, collect telemetry, use storage, or make network requests. Options are bounded, selectors/colors are validated before installing the overlay, and DOM content is never inserted as HTML. Dependencies are development-only.